About

Founding Engineer at Runlayer, responsible for IAM. Most of what I build here has no prior art: identity and authorization for AI agents, the users delegating to them, and the tools in between. The specs are still being written; the systems are already in production.

What I Build

Runlayer — the identity and authorization layer for an enterprise AI governance platform: agent authentication, OAuth governance, scoped permissions, and runtime access control across every major AI client. Spans emerging identity protocols across AAIF, IETF, and OpenID Foundation.

Intel — IAM and Cloud Accounts for the Tiber AI Cloud. Launched the platform’s first Authorization-as-a-Service stack, unifying RBAC, ABAC, and access policies at 2ms P99 for 100k+ users.

Nelnet — identity infrastructure for Nelnet Velocity, a multi-tenant fintech platform. Built a unified OAuth2/OIDC layer across ORY Hydra, Azure AD, and Auth0 handling 100M+ requests per month, with OPA-driven tenant-isolated ABAC.

Before that — distributed systems and platform architecture across fintech, logistics, and GRC.

Community

Member of the Agentic AI Foundation (AAIF) Identity & Trust workgroup.

Education

Graduate studies in Applied Artificial Intelligence, PUCPR. B.S. in Information Systems, Universidade Positivo.

Writing

Posts in English and Portuguese, mostly working through what I am building or trying to understand.